Roles we hire for

/

Software

/

Security Engineer

Security Engineer

Security Engineers at high-growth companies earn $119K–$188K. Median: $150K. Based on 393 public job postings (2025–2026). US DOL certified wage filings (FY2026): $150K median. Recruiting from Scratch's network includes 10,300+ security engineers, including 1,100+ with top-tier-company experience.

💰 $119K–$188K salary range

Median: $150K  ·  Based on 393 public job postings  ·  Updated August 9, 2026


What is a Security Engineer?

A security engineer designs, builds, and maintains the security controls, tooling, and processes that protect a company's systems and data. At a startup, security engineers often own the entire security function: application security, cloud security, identity management, compliance programs (SOC 2, ISO 27001), and incident response. Security has moved from a box-checking compliance exercise to a product differentiator — especially for companies selling to enterprise customers.

At what stage should you hire a Security Engineer?

Series A through Series B, once enterprise deals are requiring security questionnaires and SOC 2 certification, or when you handle sensitive customer data that creates real liability if breached. Security engineers who join at Series A can build security right into the architecture; joining at Series C means retrofitting security into systems designed without it — significantly harder and more expensive.

Common titles for this role

  • Security Engineer
  • Application Security Engineer
  • Cloud Security Engineer
  • Security Software Engineer
  • Information Security Engineer
  • Product Security Engineer

What does a Security Engineer do at a startup?

  • Conduct security design reviews and threat modeling for new features and architecture
  • Run application security testing: SAST, DAST, dependency scanning, penetration testing
  • Implement and maintain cloud security controls: IAM policies, network segmentation, secrets management
  • Build and maintain the compliance program: SOC 2 Type II, ISO 27001, HIPAA, or FedRAMP as required
  • Respond to security incidents: containment, investigation, remediation, and postmortems
  • Build security tooling: automated vulnerability scanning, SIEM, alerting
  • Train engineers on secure coding practices and security awareness

Key skills and qualifications

  • Strong software engineering background — security engineers who can't code are security analysts
  • Application security expertise: OWASP Top 10, secure SDLC, code review for vulnerabilities
  • Cloud security experience: AWS/GCP/Azure security services, IAM, network security groups
  • Compliance knowledge: SOC 2, ISO 27001, or industry-specific frameworks
  • Security tooling proficiency: SAST/DAST tools, vulnerability management platforms
  • Security certifications valued: CISSP, OSCP, AWS Security Specialty, or equivalent

Why hire your Security Engineer through Recruiting from Scratch?

  • Security engineering requires both development depth and security expertise — we screen for both sides of that equation
  • 29-day average time to hire — security searches benefit from a pre-vetted pool of candidates with relevant certifications and experience
  • 300+ placements at VC-backed companies across engineering and security functions
  • Pre-vetted for hands-on security experience, not just compliance checkbox knowledge
  • No upfront fees

Frequently Asked Questions: Security Engineer

What does a Security Engineer earn?

Based on our database of 1408 real postings, the median salary for a Security Engineer is $180K. Salaries typically range from $145K to $214K, reflecting variations in experience, location, and specific responsibilities. Our insights help clients understand market rates to attract top talent effectively.

How long does it take to hire a Security Engineer?

Hiring a Security Engineer can be a competitive process. While the industry average often falls between 45 to 60 days, our specialized approach typically reduces this timeframe significantly. On average, we help our clients secure top talent in just 29 days.

What should you look for when hiring a Security Engineer?

When hiring a Security Engineer, we advise focusing on core technical competencies such as network security, cloud environments, and incident response. Beyond technical skills, look for strong problem-solving abilities and clear communication. A solid grasp of compliance frameworks and risk management is also crucial for long-term success in the role.

How do you assess a Security Engineer candidate effectively?

To effectively assess a Security Engineer, we recommend a multi-faceted approach. Technical interviews should delve into specific security domains and past projects, while practical exercises can gauge their ability to solve real-world security challenges. Behavioral questions are also important to understand their approach to teamwork, problem-solving under pressure, and continuous learning.

Is a Security Engineer role typically remote or in-person?

The landscape for Security Engineer roles has become increasingly flexible. While some positions remain in-person, many companies now offer remote or hybrid work arrangements to attract top talent. We've seen a strong trend towards remote options, allowing organizations to access a wider pool of qualified candidates across different geographies.

📊 Salary breakdown

Security Engineer salary by location

  • All locations: $150K median ($119K–$188K typical range)
  • San Francisco: $246K median, $181K–$309K range (+64% vs. national)
  • New York: $194K median, $131K–$263K range (+30% vs. national)
  • Boston: $148K median, $99K–$168K range (-1% vs. national)
  • Austin: $196K median, $179K–$196K range (+31% vs. national)
  • Seattle: $131K median, $119K–$181K range (-12% vs. national)
  • Chicago: $145K median, $138K–$158K range (-3% vs. national)
  • Washington DC: $123K median, $123K–$133K range (-18% vs. national)

Highest paying companies

San Francisco

  • OpenAI: $310K median
  • Anthropic: $248K median
  • Harvey: $235K median
  • Crusoe: $118K median

New York

  • Jane Street: $269K median
  • Fluidstack: $203K median

Based on companies with 3+ active postings. Median of publicly advertised salary range.

What's typically included

  • Health insurance: 51% of postings
  • Equity (RSU/options): 60% of postings
  • Flexible PTO: 31% of postings
  • Parental leave: 20% of postings
  • Learning/education budget: 12% of postings
  • Visa sponsorship: 4% of postings

Typical experience required: 5–6 years.

Security salaries by seniority

What does a Security Engineer do?

Security Engineers are security engineers and analysts who protect infrastructure, data, and applications. This benchmark reflects Mid-level base compensation at high-growth and AI-native companies.

Government wage data

For corroboration, U.S. Department of Labor certified wage filings (FY2026) show a median of $150K for Security Engineer roles, ranging $120K–$176K, across 199 filings. This is reported separately from — never blended with — the job-posting median above.

Common questions

What is the average Security Engineer salary at an AI startup?
The median pay is $150K, with a typical range of $119K–$188K, based on 393 public job postings collected in 2025–2026.

Where does this salary data come from?
It is aggregated from public job postings on company career pages — no private placement or client data. We require a minimum of 15 postings per role.

Methodology

Figures are the midpoint of each posting's advertised USD salary range, aggregated from 393 public job postings (2025–2026). The range shown is the 25th–75th percentile; the median is the 50th percentile. Equity is separate and not included; where a posting's range reflects on-target earnings (OTE) for commission roles, that is included in the midpoint. Roles require at least 15 postings to be published. Last refreshed August 9, 2026.

Hiring Security Engineers? RFS recruiters specialize in Security placements at AI-native and high-growth startups. Talk to an RFS recruiter →

Are you a Security Engineer? See open Security Engineer roles →

Does this sound like a role you would be good for?

Check out all open jobs.

Find a job

Learn more from our blog

Visit our blog

Ready to hire?

Tell us about your open roles and we'll start sourcing within 48 hours.